Ana Week 1 Review

Front 1

Every Active Directory Forest must have which roles?

Back 1

Domain Naming Master & Schema Master

Front 2

What are the Domain Wide Operations Master Roles?

Back 2

Relative Identifier (RID), PDC Emulator, Infrastructure Master

Front 3

What are the three reasons to create multiple domains?

Back 3

1. Meet security requirements 2. Meet Administation requirements 3. Optimize replication traffic

Front 4

What are the three security settings within the account policies subdirectory of a group policy object in Active Directory?

Back 4

Password policy, Account lockout policy, kerberos policy

Front 5

Why would you administratively set up multiple domains?

Back 5

For privacy

Front 6

Why would you set up mulitple domains for replication?

Back 6

Using smaller domains reduces network traffic

Front 7

What are the Five Predefined Containers within Active Directory?

Back 7

1. Builtin 2. Computers 3. Domain Controller 4. Foreign Security Principals 5. Users

Front 8

What Predefined container is also an OU?

Back 8

Domain Controllers

Front 9

What can you delegate in the Delagation of Control Wizard?

Back 9

1. Users or Groups 2. Tasks to Delegate 3. AD Objects Type 4. Permissions

Front 10

What are the three things to know about trusts?

Back 10

1. Can be created Manually 2. Can be either transitive (not bound by the domains in the trust relationship) or Non-Transitive (bound) 3. Trusts can be one-way or two-way

Front 11

What is the default protocol in Win 2k3?

Back 11

Kerboros

Front 12

What is NLTest?

Back 12

It is a command line tool that lists the trusts of the domain of a certain domain controller when you type the following command: nltest/trusted_domains/server:ship-name.navy.mil

Front 13

What are the four trust relationships in Active Directory?

Back 13

1. Shortcuts 2. External 3. Realm 4. Forest

Front 14

What is replication used for?

Back 14

Fault Tolerance, Load Balancing, and Proximity

Front 15

What are the two trade-offs with replication?

Back 15

High replication load vs latency

Front 16

What changes initiate replication (trigger)?

Back 16

Create, Modify, Move and Delete

Front 17

What is the component the builds a replication topology when there are multiple domain controllers?

Back 17

Knowledge Consistency Checker

Front 18

What does the Knowledge Consistency Checker do?

Back 18

It wakes up every 15 minutes to check if there are changes in the selection of domain controllers and it creates shortcuts when additional domain controllers are added.

Front 19

What does a shortcut connections between domain controllers do?

Back 19

It makes sure that a path between domain controllers is never more than 3 hops (maximum of 45 seconds)

Front 20

What is Replmon?

Back 20

Forces synchronization between domain controllers

Front 21

What is Repadmin

Back 21

Forces replication between replication partner.

Front 22

What are the three restore methods?

Back 22

1. Primary 2. Non-Authoritative 3. Authoritative

Front 23

What is the primary restore method?

Back 23

Used when restoring the only running server (all others lost).

Front 24

What is the Non-Authoritative restore method?

Back 24

(Default) Resstores services, receives data from other servers through replication

Front 25

What is the Authoritative restore method?

Back 25

Restores to the state of the last backup and over writes all changes since backup

Front 26

What is the default restore method?

Back 26

Non-Authoritative

Front 27

What utility is used to do an authoritative restore?

Back 27

Ntdutil.exe

Front 28

What are the Active Directory Tools used to troubleshoot?

Back 28

1. Directory Service Log 2. Netdiag.exe 3. Dcdiag.exe 4. Ntdutil.exe

Front 29

What is Netdiag.exe

Back 29

It is a command line Network Connectivity Tester. Performs a series of tests and writes results to a text file.

Front 30

What is Dcdiag.exe

Back 30

It is a command line domain controller diagnostic tool

Front 31

What is Ntdutil.exe

Back 31

It is a command line Active Directory diagnostic tool

Front 32

What are the two ways of mangeing master roles?

Back 32

Transferring operations master roles with permission of current owner & Seizing the operational master role without permission

Front 33

What is convergence?

Back 33

AD is a loosely consistent database. Information in different domain controllers is not necessarily consistent at any given time. However, when there are no changes for a while, the information will tend to be consistent. This is convergence.

Front 34

What is intrasite?

Back 34

Uses a bidirectional ring and add shortcuts if more than three hops to reduce latency.

Front 35

What is intersite?

Back 35

Uses bridgehead servers to replicate to and from other sites.

Front 36

What is Group Scope?

Back 36

It defines how permissions are assigned to group members and how a group can be used across domain boundaries.

Front 37

What are the 3 Group Scopes?

Back 37

1. Domain Local 2. Global 3. Universal

Front 38

What is Domain Local?

Back 38

It is used to assign access permissions to global groups for local domain resources.

Front 39

What is Global Groups?

Back 39

It is used to provide categorized membership in domain local groups for individual security principals or for direct permission assignment.

Front 40

What is an Universal Group?

Back 40

It is used to grant access to resources in all trusted domains, but universal groups can only be used as a security principal

Front 41

How many levels of nesting are allowed?

Back 41

No more than 3.

Front 42

How are the different groups arranged?

Back 42

Top Down… Universal > Global > Local

Front 43

What are the 3 types of permissions?

Back 43

1. Read 2. Change 3. Full Control

Front 44

What is an inheritable permission?

Back 44

Change.

Front 45

What does the performance console include?

Back 45

System Monitor, Performance Logs, and Alerts

Front 46

What are the 3 configurations of the system monitor?

Back 46

1. Type of Data 2. Source of Data 3. Sampling Intervals

Front 47

What are the 3 counters of viewing data?

Back 47

1. Memory 2. Physical Disk(_Total) 3. Processor(_Total)

Front 48

What are the 5 tabs in Task Manager?

Back 48

1. Applications 2. Process 3. Performance 4. Networking 5. User

Front 49

What is a distribution group?

Back 49

Cannot assign permissions. Only used for email.

Front 50

What is a security group?

Back 50

It can be assigned permissions and can be used for email.

Front 51

What command do you use to figure out what group a user belongs to?

Back 51

dsget

Front 52

How do you identify a hidden share?

Back 52

$

Front 53

What are the 4 tabs in the shared permissions?

Back 53

1. General 2. Publish 3. Share Permissions 4. Security

Front 54

What is inheritance?

Back 54

Permissions applied to a folder under its parent folder.

Front 55

What is the default inheritance in Active directory?

Back 55

Static Inheritance

Front 56

What is static Inheritance?

Back 56

Copies the permission to the access control list of each appropriate child object.

Front 57

What are the three logs available in Event Viewer?

Back 57

1. Application 2. System 3. Security

Front 58

How do you access task manager?

Back 58

CTRL-ALT-DEL or by clicking the bottom of the screen

Front 59

What are the two ways that you intiate recovery console?

Back 59

Start using the Win 2K3 CD or by selecting it when the server starts?

Front 60

What are the three types of backups?

Back 60

Full, Incremental and Differential

Front 61

What is a full backup?

Back 61

Everything is backed up

Front 62

What is an incremental backup?

Back 62

Selected files with the archive attribute are backed-up and it clears the archival attribute. It only archives files that have been changed since the last backup.

Front 63

What is a differential backup?

Back 63

Selected files with the archive attribute are backed-up but it does not clear the archival attribute.

Front 64

What is the backup utility inherent in Win 2K3?

Back 64

ntbackup

Front 65

What is DHCP?

Back 65

DHCP allows you to automatically assign IP addresses, subnet masks, and other configuration information to client computers on a local network. Implementing a basic DHCP server requires installing the server, authorizing the server, configuring the scopes, exclusions, reservations, and options, activating the scopes, and verifying the configuration.

Front 66

What is a scope?

Back 66

A scope is a pool of IP addresses within a logical subnet that the DHCP server can assign to clients. Scopes provide the essential means for the server to manage distribution and assignment of IP addresses and of any related configuration parameters to clients on the network.

Front 67

What is a lease?

Back 67

An IP address within a defined scope that is offered to a client is known as a lease.

Front 68

How are leases renewed?

Back 68

First, a client automatically attempts to renew its lease after 50 percent of the client lease time. A client also attempts to renew a lease upon restarting. When a DHCP client shuts down and restarts it typically obtains a fresh lease from the same IP address it had prior to the shutdown. Finally, leases are refreshed when you execute the Ipcongif /renew command from a DHCP client computer.

Front 69

What is a Scope Name Page?

Back 69

This page allows you to assign a name for the scope.

Front 70

What is an IP Address Range Page?

Back 70

This page allows you to specify the starting and ending IP addresses that define the range of the scope, along with the subnet mask you want to assign the distributed addresses.

Front 71

What is the Add Exclusion Page?

Back 71

This page allows you to specify the IP addresses within the defined range that you do not want to lease to clients.

Front 72

What is the Lease Duration Page?

Back 72

This page allows you to define the lease duration values, these lease durations are then assigned to clients.

Front 73

What is the Configure DHCP Page?

Back 73

This page allows you to determine whether to configure DHCP options for the scope through subsequent pages in the New Scope Wizard or later through the DHCP console.

Front 74

What is the Router (Default Gateway) Page?

Back 74

This page allows you to specify which default gateway should be assigned to clients.

Front 75

What is the Domain Name and DNS Server Page?

Back 75

This page allows you to specify both the parent domain to be assigned to client computers and the addresses of DNS servers to be assigned to clients.

Front 76

What is the WINS Server Page?

Back 76

This page allows you to specify the addresses of WINS servers assigned to the client.

Front 77

What is the Activate Scope Page?

Back 77

This page allows you to determine whether the scope should be activated after the wizard is completed.

Front 78

What is dhcploc.exe?

Back 78

This is a command line tool to help identify rogue servers on a domain.

Front 79

What are the 2 liabilities to using ntbackup.exe?

Back 79

You have to back up to a local device. It cannot be burned directly to DVD or CD.

Front 80

What do you have to do the have DHCP server to work properly?

Back 80

Authorize it

Front 81

What is a reservation?

Back 81

A permanent assignment of IP address.

Front 82

What is the 80/20 rule?

Back 82

Divide the scope addresses between 2 DHCP servers. Using more than one DHCP server on the same subnet provides increased fault tolerance for servicing DHCP clients located on it.

Front 83

What is ipconfig?

Back 83

Used to get basic host configuration information. IP address, subnet mask, and default gateway.

Front 84

What is network diagnostics?

Back 84

It is a graphical troubleshooting tool built into Win 2k3 that provides detailed information about the local computer's network configuration.

Front 85

What is telnet?

Back 85

Used to troubleshoot SMTP by checking whether a TCP port can be opened to a receiving host and whether the receiving host is responsing.

Front 86

What is Nslookup?

Back 86

Used to query DNS to confirm that DNS is working properly.

Front 87

What is Ping?

Back 87

It is a command line tool that uses ICMP echo commands to test IP connectivity.

Front 88

What is ARP?

Back 88

It is a command line utility that is used to manage ARP cache, which is a table that stores IP address/MAC address pairs.

Front 89

What is Nbtstat?

Back 89

Network basic input/output system (NETBIOS) over TCP/IP (NetBT) resolved NETBIOS names to IP addresses.

Front 90

What is Netstat?

Back 90

It is a command line utility that is used to display protocol statistics and current TCP/IP connections.

Front 91

What is Tracert?

Back 91

It is a command line utility that is used to determine the path an IP datagram takes to reach a destination.

Front 92

What is Pathping?

Back 92

It is a route-tracing tool that combines the features of ping and tracert and gives additional information that neither of those tools provide.

Front 93

When do you disable an user account?

Back 93

When a user will not need an account for an extended period of time but will need it again.

Front 94

How do you modify multiple user account simultaneously?

Back 94

By holding down the CTRL key while selecting multiple accounts.

Front 95

What are the subsets of user properties?

Back 95

General, Account, Address, Profile, and Organization

Front 96

What is a local profile?

Back 96

Profile based at the local computer and is available at only the local computer. When a user logs on to the client computer he or she always receives his or her individual desktop settings and connections, regardless of how many users share the same client computer.

Front 97

What is a roaming profile?

Back 97

It is the same as a local profile except that the profile is stored on a network share accessable to the user at login. This makes it available on any computer on the network.

Front 98

What is a mandatory profile?

Back 98

This kind of profile is helpful in locking down the desktop. It is a read-only roaming profile, based on the server and downloaded to the local computer every time a user logs in.

Front 99

How do you create a mandatory profile?

Back 99

It is created the same way as you create a personal profile, but with one additional step. After you create the profile and copy it to the target location, change the name of the profile's registry file from Ntuser.dat to Ntuser.man.

Front 100

What is an user object?

Back 100

It is an account that a user can log in with, a placeholder for informational properties, and security principal

Front 101

What is a security principal?

Back 101

This means that you can give permission to the user for resources and assign security group membership to the user.

Front 102

Why use a user object template?

Back 102

Because many users share the same attributes. It saves time and energy.

Front 103

How do you create a user object template?

Back 103

Simply create a user and populate it with all the common elements and copy the template and fill in with the new user's information.